$ rpki-client -vvf rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft File: uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft (raw, json) Hash identifier: pT5suio+ychm9BEXBtMBvC2txnt1wG9FihH3zY7FbWk= Subject key identifier: 8D:B1:D5:59:E9:B9:00:56:E4:C1:DA:ED:09:48:85:CC:03:C7:AF:F7 Authority key identifier: B8:F8:46:B4:35:3B:64:29:AC:40:43:F3:2B:B7:89:4C:F8:38:55:FD Certificate issuer: /CN=A9170829/serialNumber=B8F846B4353B6429AC4043F32BB7894CF83855FD Certificate serial: 048E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft Manifest number: 0612 Signing time: Wed 05 Nov 2025 00:13:17 +0000 Manifest this update: Wed 05 Nov 2025 00:13:17 +0000 Manifest next update: Wed 12 Nov 2025 00:13:17 +0000 Files and hashes: 1: uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.crl (hash: jYi4xOujBzKYdPvywEjV7blRLx2eEA3pNCOxrdyFEH0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.crl rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:13:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1166 (0x48e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170829, serialNumber=B8F846B4353B6429AC4043F32BB7894CF83855FD Validity Not Before: Nov 5 00:13:17 2025 GMT Not After : Nov 12 00:13:17 2025 GMT Subject: CN=690a969d-d286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:80:20:7c:2d:68:dc:b6:92:92:61:6c:a3:74: fa:1b:e0:ef:dc:25:b2:41:a4:c2:89:ef:99:49:b4: 8e:8d:6b:24:93:95:cb:6f:8f:7d:2b:c9:71:01:8a: ef:16:54:15:40:be:53:be:d4:98:09:82:b5:61:71: 43:77:dc:a6:69:7f:3d:81:11:9e:1a:bf:40:ce:3e: 0c:fb:cb:66:14:a1:ad:14:a3:88:fc:29:ce:6a:aa: ae:0e:99:0a:19:c8:96:11:60:ad:01:d0:46:e8:ee: 84:7d:02:74:5b:34:09:9f:bb:1c:0b:33:12:ac:e9: 7a:7c:63:f3:be:a3:b6:46:55:0f:3a:81:35:0e:c5: 1f:0a:47:4e:5d:b9:43:90:6f:1c:fb:93:39:d7:81: 23:cb:15:e5:01:3b:68:d5:8b:d6:1d:7a:10:06:62: f2:13:c2:05:26:0d:35:f7:fd:6a:e1:61:d5:a1:c2: 1e:8f:39:f9:2b:8f:55:a7:02:49:c6:07:a0:7f:d7: c5:dd:d5:ac:d1:60:b4:4e:4a:7f:00:28:74:24:3c: d2:45:cc:e5:c5:22:4d:08:41:c2:df:07:24:74:8b: f3:58:9f:68:f9:11:5d:2b:72:6d:7c:c0:c2:fb:d9: 81:41:c4:38:20:b2:a9:d6:25:31:06:2d:cf:e8:9f: 13:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:B1:D5:59:E9:B9:00:56:E4:C1:DA:ED:09:48:85:CC:03:C7:AF:F7 X509v3 Authority Key Identifier: keyid:B8:F8:46:B4:35:3B:64:29:AC:40:43:F3:2B:B7:89:4C:F8:38:55:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/uPhGtDU7ZCmsQEPzK7eJTPg4Vf0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:d7:32:e1:95:16:c7:96:8e:f7:fb:19:91:a3:cd:5e:ff:ec: 27:cd:c0:18:c8:ca:2c:55:94:73:27:f9:ef:f5:6b:82:94:c1: 5b:09:ca:f5:bb:6d:00:92:bc:95:92:1e:6d:c7:6c:b0:11:4b: 78:8c:56:b5:7e:5f:3a:e9:d9:42:5a:7e:30:f4:0e:37:14:04: f4:28:6d:ad:1c:08:de:da:29:f2:42:65:55:9b:48:55:f8:a2: fb:5d:d6:1e:7c:8f:16:a5:59:0c:d5:ef:e0:ef:7b:b6:8f:22: 6e:c4:62:9e:4c:3a:bd:5b:cf:a5:fa:a8:c3:2b:3b:e1:03:22: fb:1d:ae:b8:74:d7:ff:87:99:2b:60:e5:40:e3:bc:de:8c:88: f0:7b:25:6f:8a:88:ae:a0:5e:ea:ce:cd:e4:5a:71:56:20:8e: 85:36:2b:bb:c7:e5:1c:72:f6:1e:30:15:56:cc:31:16:d9:16: 5c:5d:93:bb:8b:e2:a1:68:c6:4d:04:df:f3:41:42:b8:64:71: a6:52:fa:3e:06:94:d6:68:66:0f:e7:22:2c:17:bf:4c:9b:d1: 7a:38:19:2a:99:05:1e:b5:24:46:99:8d:9c:1f:6c:7d:45:83: 08:8e:2c:20:4d:ee:64:2e:1c:27:34:0f:ae:4f:87:6e:63:6c: 44:43:2f:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA4MjkxMTAvBgNVBAUTKEI4Rjg0NkI0MzUzQjY0MjlBQzQwNDNGMzJCQjc4OTRD RjgzODU1RkQwHhcNMjUxMTA1MDAxMzE3WhcNMjUxMTEyMDAxMzE3WjAYMRYwFAYD VQQDEw02OTBhOTY5ZC1kMjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0YAgfC1o3LaSkmFso3T6G+Dv3CWyQaTCie+ZSbSOjWskk5XLb499K8lxAYrv FlQVQL5TvtSYCYK1YXFDd9ymaX89gRGeGr9Azj4M+8tmFKGtFKOI/CnOaqquDpkK GciWEWCtAdBG6O6EfQJ0WzQJn7scCzMSrOl6fGPzvqO2RlUPOoE1DsUfCkdOXblD kG8c+5M514EjyxXlATto1YvWHXoQBmLyE8IFJg019/1q4WHVocIejzn5K49VpwJJ xgegf9fF3dWs0WC0Tkp/ACh0JDzSRczlxSJNCEHC3wckdIvzWJ9o+RFdK3JtfMDC +9mBQcQ4ILKp1iUxBi3P6J8TnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI2x1Vnp uQBW5MHa7QlIhcwDx6/3MB8GA1UdIwQYMBaAFLj4RrQ1O2QprEBD8yu3iUz4OFX9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDgyOS83NjY3QkVEMDYz QTAxMUVDQUQ4Mjk5MUNDNEY5QUUwMi91UGhHdERVN1pDbXNRRVB6SzdlSlRQZzRW ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VQaEd0RFU3WkNtc1FFUHpLN2VKVFBnNFZmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDgyOS83NjY3QkVEMDYzQTAxMUVDQUQ4Mjk5MUNDNEY5QUUwMi91UGhHdERVN1pD bXNRRVB6SzdlSlRQZzRWZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAk1zLhlRbHlo73+xmRo81e/+wnzcAYyMosVZRzJ/nv9WuClMFbCcr1 u20AkryVkh5tx2ywEUt4jFa1fl866dlCWn4w9A43FAT0KG2tHAje2inyQmVVm0hV +KL7XdYefI8WpVkM1e/g73u2jyJuxGKeTDq9W8+l+qjDKzvhAyL7Ha64dNf/h5kr YOVA47zejIjweyVvioiuoF7qzs3kWnFWII6FNiu7x+UccvYeMBVWzDEW2RZcXZO7 i+KhaMZNBN/zQUK4ZHGmUvo+BpTWaGYP5yIsF79Mm9F6OBkqmQUetSRGmY2cH2x9 RYMIjiwgTe5kLhwnNA+uT4duY2xEQy/8 -----END CERTIFICATE-----Generated at Wed Nov 5 21:15:40 2025 by rpki-client